Static task
static1
Behavioral task
behavioral1
Sample
3fb119b04cae83ea2ba10d7cbbcdffce895b07d6abd06a921626221aa3e0d279.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3fb119b04cae83ea2ba10d7cbbcdffce895b07d6abd06a921626221aa3e0d279.exe
Resource
win10v2004-20240802-en
General
-
Target
88e5d9d97d0e3c83e74926986d6e5ef6.bin
-
Size
267KB
-
MD5
ea035e1844a8233550432bca372a2eec
-
SHA1
b401f0a0fce4b904710682768e49fb0434ae2e4e
-
SHA256
15430a33da916938e630acf758eb30204a01bdda0718cf2d388230b19be4bba6
-
SHA512
0ebd33680009839653334d41951a32ce022a94f6e11ae8df24abc9c08e84273deb2614e4ce5102d141b0b85e3c5a1960de87153bff7c27a4b1a0864eb15accb2
-
SSDEEP
6144:ovu9yOHXogxBzK2stGgTVoH/hTgjI5lF0cEgCGB33pOyZ99:ovRiXogzK29gof9gj+lFHEgH3519
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3fb119b04cae83ea2ba10d7cbbcdffce895b07d6abd06a921626221aa3e0d279.exe
Files
-
88e5d9d97d0e3c83e74926986d6e5ef6.bin.zip
Password: infected
-
3fb119b04cae83ea2ba10d7cbbcdffce895b07d6abd06a921626221aa3e0d279.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE